Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

David Lechner

Researcher fromBayLibre
#34672of 56,330
7.8Total CVSS
Vulnerabilities · 1
PT-2024-29804
7.8
2024-07-08
Linux · Linux Kernel · CVE-2024-42249
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue arises from the incorrect call to `spi maybe unoptimize message()` in `spi async()`, which can corrupt the message while it is being used by the controller driver. This is because the message is likely to be in the queue and not transferred yet. The function `spi maybe unoptimize message()` is already called in the correct place in `spi finalize current message()` to balance the call to `spi maybe optimize message()` in `spi async()`. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.